Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: 5MaAMgt7DHQHLQfHgWC447nDtxexWvNkVgUwMaSUDsk=
Subject key identifier: 94:7E:8D:04:8A:04:96:70:BA:53:89:7A:43:E2:74:1F:01:7A:E7:66
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 019922560ADB4236C4AE98F23E9EFB2C0370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0CAE
Signing time: Sun 07 Sep 2025 04:01:28 +0000
Manifest this update: Sun 07 Sep 2025 04:01:28 +0000
Manifest next update: Mon 08 Sep 2025 04:01:28 +0000
Files and hashes: 1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: puCSYRoJvr4hY8icJMkK+Obr290OV/JP/d/wm366TB8=)
2: krakPppfz7flLx069ZARtir4dzE.roa (hash: rc01bvPv/5+vfBCkfObVuaLV/O1M46ZYkYO5PLG/3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:56:0a:db:42:36:c4:ae:98:f2:3e:9e:fb:2c:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Sep 7 04:01:28 2025 GMT
Not After : Sep 8 04:01:28 2025 GMT
Subject: CN=947e8d048a049670ba53897a43e2741f017ae766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:50:f2:75:0e:98:9e:16:0f:95:5f:77:87:
a1:47:2e:c9:7f:b8:72:eb:92:bd:b3:b5:0c:6d:c6:
7c:0f:d6:8b:8a:86:00:3b:87:7d:9c:d5:87:be:1f:
8b:7c:a8:8a:bf:8f:19:a0:b0:1f:14:79:a4:72:cb:
6b:5d:0d:09:ba:e6:0a:5f:fa:ac:5a:e9:d5:ac:12:
61:bc:66:a3:73:bd:1e:ff:d7:64:a5:dc:a5:97:98:
3c:ad:91:0d:ea:4b:b2:49:37:c2:5a:76:37:01:25:
97:00:aa:be:c8:1c:74:05:e7:ae:0f:02:61:bf:36:
38:3b:a9:ee:75:35:1f:97:c3:19:1f:d4:13:a9:18:
03:7d:b7:4e:7f:d1:eb:b6:80:37:aa:9a:1d:a4:97:
b2:79:a3:3d:09:fc:0b:fe:33:c7:a6:a5:0d:67:6a:
41:cd:d3:79:d6:8e:68:b2:10:28:13:43:ed:f3:dd:
68:36:be:a5:35:0a:83:22:2a:ec:62:45:4a:a9:39:
52:92:f2:7e:c8:9e:82:49:2a:95:80:66:4f:3d:67:
46:98:7f:0e:82:7c:84:4b:b2:6f:01:20:a9:ae:d7:
79:6f:77:08:d8:4f:21:e9:c5:09:d8:ca:0a:e7:aa:
d9:20:12:30:99:5b:21:91:51:9b:5f:d6:02:5c:e9:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7E:8D:04:8A:04:96:70:BA:53:89:7A:43:E2:74:1F:01:7A:E7:66
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f7:db:c8:18:ce:71:29:e4:80:90:3f:e8:2c:e9:ab:eb:36:
1b:b4:1f:43:99:f8:73:b9:3a:a1:28:56:f7:83:5d:f7:c4:05:
96:8d:24:a7:f1:92:c0:60:9e:d7:a9:e9:9e:b5:64:95:ce:e0:
9c:94:a0:bc:95:f8:47:ea:61:97:64:50:f4:22:f2:20:56:c2:
c3:a8:6f:be:62:b6:9d:68:ca:38:4c:19:be:c6:7e:5b:a8:7e:
06:4c:fe:64:35:f2:93:7f:fa:5d:da:e8:89:d3:ef:f1:a4:b5:
64:90:ff:40:47:fa:c5:f8:89:04:0e:58:d1:e9:38:49:fb:db:
9e:eb:a9:9e:48:bc:a0:2a:26:a6:2a:39:23:61:92:8c:4d:07:
1b:0a:ea:f1:aa:85:4c:79:11:f9:a6:fd:2d:0d:f8:fb:68:b5:
8e:b8:48:68:7b:7a:ac:9b:24:8e:e4:b3:d3:df:f8:cf:69:58:
64:7f:49:aa:b2:5e:4c:96:73:8a:5a:f9:5d:ce:86:e6:d1:d1:
7f:26:a5:62:2a:c0:41:9d:27:8b:13:8c:25:78:e8:d0:1c:98:
c5:d7:4b:bb:0e:c0:91:23:f0:a2:8a:eb:b5:41:3d:d7:cd:14:
2f:66:c6:62:c0:b5:ed:9c:84:e8:ee:fc:90:7b:58:6c:62:c6:
31:75:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:19 2025 by rpki-client